Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 62 articles for you...
202
security advisoryimportantcommand injectionopenSUSE Python311 Important Memory Error Command Injection Fix 2026-3104-1
An update that solves four vulnerabilities can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:3104-1 Release Date: 2026-07-17T13:31:49Z Rating: important References: * bsc#1261969 * bsc#1262098 * bsc#1262319 * bsc#1262654 Cross-References: * CVE-2026-1502 * CVE-2026-4786 * CVE-2026-6019 * CVE-2026-6100 CVSS scores: * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N *CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues * CVE-2026-1502: CR/LF bytes not rejected by HTTP client proxy tunnel headers or host (bsc#1261969). * CVE-2026-4786: URLs containing `%action` can bypass mitigation that allows command injection via the `webbrowser.open()` API (bsc#1262319). * CVE-2026-6019: HTML parser-sensitive sequence not neutralized by `http.cookies.Morsel.js_output()` (bsc#1262654). * CVE-2026-6100: use-after-free in decompression modules when a memory allocation fails with a `MemoryError` and the decompression instance is re- used (bsc#1262098). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-3104=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3104=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3104=1 * SUSE Linux EnterpriseServer for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3104=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-3104=1 ## Package List: * openSUSE Leap 15.6 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.15-150600.3.59.3 * python311-base-64bit-debuginfo-3.11.15-150600.3.59.3 * python311-64bit-3.11.15-150600.3.59.3 * python311-base-64bit-3.11.15-150600.3.59.3 * libpython3_11-1_0-64bit-debuginfo-3.11.15-150600.3.59.3 * python311-64bit-debuginfo-3.11.15-150600.3.59.3 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python311-doc-devhelp-3.11.15-150600.3.59.1 * python311-3.11.15-150600.3.59.3 * python311-curses-3.11.15-150600.3.59.3 * python311-core-debugsource-3.11.15-150600.3.59.3 * python311-tk-debuginfo-3.11.15-150600.3.59.3 * libpython3_11-1_0-debuginfo-3.11.15-150600.3.59.3 * python311-testsuite-3.11.15-150600.3.59.3 * python311-dbm-debuginfo-3.11.15-150600.3.59.3 * python311-dbm-3.11.15-150600.3.59.3 * python311-testsuite-debuginfo-3.11.15-150600.3.59.3 * python311-base-3.11.15-150600.3.59.3 * python311-curses-debuginfo-3.11.15-150600.3.59.3 * libpython3_11-1_0-3.11.15-150600.3.59.3 * python311-base-debuginfo-3.11.15-150600.3.59.3 * python311-debugsource-3.11.15-150600.3.59.3 * python311-tk-3.11.15-150600.3.59.3 * python311-tools-3.11.15-150600.3.59.3 * python311-idle-3.11.15-150600.3.59.3 * python311-doc-3.11.15-150600.3.59.1 * python311-debuginfo-3.11.15-150600.3.59.3 * python311-devel-3.11.15-150600.3.59.3 * openSUSE Leap 15.6 (x86_64) * python311-base-32bit-debuginfo-3.11.15-150600.3.59.3 * python311-base-32bit-3.11.15-150600.3.59.3 * libpython3_11-1_0-32bit-3.11.15-150600.3.59.3 * python311-32bit-debuginfo-3.11.15-150600.3.59.3 * python311-32bit-3.11.15-150600.3.59.3 * libpython3_11-1_0-32bit-debuginfo-3.11.15-150600.3.59.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) *python311-base-debuginfo-3.11.15-150600.3.59.3 * python311-dbm-debuginfo-3.11.15-150600.3.59.3 * python311-3.11.15-150600.3.59.3 * python311-curses-3.11.15-150600.3.59.3 * python311-dbm-3.11.15-150600.3.59.3 * python311-debugsource-3.11.15-150600.3.59.3 * libpython3_11-1_0-debuginfo-3.11.15-150600.3.59.3 * python311-core-debugsource-3.11.15-150600.3.59.3 * python311-tk-3.11.15-150600.3.59.3 * python311-base-3.11.15-150600.3.59.3 * python311-curses-debuginfo-3.11.15-150600.3.59.3 * python311-tools-3.11.15-150600.3.59.3 * python311-tk-debuginfo-3.11.15-150600.3.59.3 * python311-idle-3.11.15-150600.3.59.3 * libpython3_11-1_0-3.11.15-150600.3.59.3 * python311-debuginfo-3.11.15-150600.3.59.3 * python311-devel-3.11.15-150600.3.59.3 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python311-base-debuginfo-3.11.15-150600.3.59.3 * python311-debugsource-3.11.15-150600.3.59.3 * python311-dbm-3.11.15-150600.3.59.3 * python311-curses-3.11.15-150600.3.59.3 * python311-dbm-debuginfo-3.11.15-150600.3.59.3 * python311-3.11.15-150600.3.59.3 * python311-core-debugsource-3.11.15-150600.3.59.3 * python311-tk-3.11.15-150600.3.59.3 * python311-base-3.11.15-150600.3.59.3 * python311-curses-debuginfo-3.11.15-150600.3.59.3 * python311-tk-debuginfo-3.11.15-150600.3.59.3 * python311-tools-3.11.15-150600.3.59.3 * libpython3_11-1_0-3.11.15-150600.3.59.3 * python311-idle-3.11.15-150600.3.59.3 * libpython3_11-1_0-debuginfo-3.11.15-150600.3.59.3 * python311-debuginfo-3.11.15-150600.3.59.3 * python311-devel-3.11.15-150600.3.59.3 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-dbm-debuginfo-3.11.15-150600.3.59.3 * python311-dbm-3.11.15-150600.3.59.3 * python311-curses-3.11.15-150600.3.59.3 * python311-3.11.15-150600.3.59.3 * python311-debugsource-3.11.15-150600.3.59.3 * python311-core-debugsource-3.11.15-150600.3.59.3 *python311-tk-3.11.15-150600.3.59.3 * python311-curses-debuginfo-3.11.15-150600.3.59.3 * python311-tk-debuginfo-3.11.15-150600.3.59.3 * python311-tools-3.11.15-150600.3.59.3 * python311-idle-3.11.15-150600.3.59.3 * python311-debuginfo-3.11.15-150600.3.59.3 * python311-devel-3.11.15-150600.3.59.3 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-base-debuginfo-3.11.15-150600.3.59.3 * libpython3_11-1_0-debuginfo-3.11.15-150600.3.59.3 * python311-core-debugsource-3.11.15-150600.3.59.3 * python311-base-3.11.15-150600.3.59.3 * libpython3_11-1_0-3.11.15-150600.3.59.3 ## References: * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 . Four security issues in python311 are resolved in openSUSE update SUSE-SU-2026:3104-1. Install the patch immediately.. openSUSE update, python update, security flaws, important fixes, python311 patch. . Severity: Important. LinuxSecurity.com Team
Jul 17, 2026
•Important
OpenSUSE
202
security advisorymoderateOpenSUSEopenSUSE 15.4 python311 Moderate Base64 Decoding Issue 2026-2723-1
An update that solves one vulnerability and has one security fix can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:2723-1 Release Date: 2026-07-01T18:09:22Z Rating: moderate References: * bsc#1258364 * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: Security issues fixed: * CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). Other updates and bugfixes: * Rewrite structure of Python interpreter packages. `python3*` symbols should be now provided by real `python3` packages and its subpackages instead of the virtual provides (bsc#1258364). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-2723=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2723=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586ppc64le s390x x86_64) * python311-core-debugsource-3.11.15-150400.9.88.1 * python311-testsuite-3.11.15-150400.9.88.1 * python311-curses-debuginfo-3.11.15-150400.9.88.1 * python311-doc-devhelp-3.11.15-150400.9.88.1 * python311-dbm-3.11.15-150400.9.88.1 * python311-testsuite-debuginfo-3.11.15-150400.9.88.1 * python311-idle-3.11.15-150400.9.88.1 * python311-debugsource-3.11.15-150400.9.88.1 * python311-tools-3.11.15-150400.9.88.1 * libpython3_11-1_0-3.11.15-150400.9.88.1 * python311-base-3.11.15-150400.9.88.1 * python311-doc-3.11.15-150400.9.88.1 * python311-curses-3.11.15-150400.9.88.1 * python311-devel-3.11.15-150400.9.88.1 * libpython3_11-1_0-debuginfo-3.11.15-150400.9.88.1 * python311-3.11.15-150400.9.88.1 * python311-tk-debuginfo-3.11.15-150400.9.88.1 * python311-tk-3.11.15-150400.9.88.1 * python311-dbm-debuginfo-3.11.15-150400.9.88.1 * python311-debuginfo-3.11.15-150400.9.88.1 * python311-base-debuginfo-3.11.15-150400.9.88.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-32bit-3.11.15-150400.9.88.1 * libpython3_11-1_0-32bit-3.11.15-150400.9.88.1 * python311-base-32bit-3.11.15-150400.9.88.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-64bit-3.11.15-150400.9.88.1 * libpython3_11-1_0-64bit-3.11.15-150400.9.88.1 * python311-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-64bit-3.11.15-150400.9.88.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-base-3.11.15-150400.9.88.1 * python311-3.11.15-150400.9.88.1 * libpython3_11-1_0-3.11.15-150400.9.88.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html *https://bugzilla.suse.com/show_bug.cgi?id=1258364 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . # Security update for python311 Announcement ID: SUSE-SU-2026:2723-1 Release Date: 2026-07-01T18:09:. security, update, solves, vulnerability, installed. . Severity: moderate. LinuxSecurity.com Team
Jul 02, 2026
•moderate
OpenSUSE
100
security advisorymoderateSuSESUSE python311 Moderate Base64 Decode Issue Advisory 2026-2723-1
An update that solves one vulnerability and has one security fix can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:2723-1 Release Date: 2026-07-01T18:09:22Z Rating: moderate References: * bsc#1258364 * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: Security issues fixed: * CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). Other updates and bugfixes: * Rewrite structure of Python interpreter packages. `python3*` symbols should be now provided by real `python3` packages and its subpackages instead of the virtual provides (bsc#1258364). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-2723=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2723=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586ppc64le s390x x86_64) * python311-core-debugsource-3.11.15-150400.9.88.1 * python311-testsuite-3.11.15-150400.9.88.1 * python311-curses-debuginfo-3.11.15-150400.9.88.1 * python311-doc-devhelp-3.11.15-150400.9.88.1 * python311-dbm-3.11.15-150400.9.88.1 * python311-testsuite-debuginfo-3.11.15-150400.9.88.1 * python311-idle-3.11.15-150400.9.88.1 * python311-debugsource-3.11.15-150400.9.88.1 * python311-tools-3.11.15-150400.9.88.1 * libpython3_11-1_0-3.11.15-150400.9.88.1 * python311-base-3.11.15-150400.9.88.1 * python311-doc-3.11.15-150400.9.88.1 * python311-curses-3.11.15-150400.9.88.1 * python311-devel-3.11.15-150400.9.88.1 * libpython3_11-1_0-debuginfo-3.11.15-150400.9.88.1 * python311-3.11.15-150400.9.88.1 * python311-tk-debuginfo-3.11.15-150400.9.88.1 * python311-tk-3.11.15-150400.9.88.1 * python311-dbm-debuginfo-3.11.15-150400.9.88.1 * python311-debuginfo-3.11.15-150400.9.88.1 * python311-base-debuginfo-3.11.15-150400.9.88.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-32bit-debuginfo-3.11.15-150400.9.88.1 * python311-32bit-3.11.15-150400.9.88.1 * libpython3_11-1_0-32bit-3.11.15-150400.9.88.1 * python311-base-32bit-3.11.15-150400.9.88.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-64bit-3.11.15-150400.9.88.1 * libpython3_11-1_0-64bit-3.11.15-150400.9.88.1 * python311-64bit-debuginfo-3.11.15-150400.9.88.1 * python311-base-64bit-3.11.15-150400.9.88.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-base-3.11.15-150400.9.88.1 * python311-3.11.15-150400.9.88.1 * libpython3_11-1_0-3.11.15-150400.9.88.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html *https://bugzilla.suse.com/show_bug.cgi?id=1258364 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . Security update for python311 addressing CVE-2026-3446, mitigates issues related to base64 decoding in SUSE systems.. SUSE Python311 Security Update, CVE-2026-3446, Python Security Fix, SUSE Advisory. . Severity: moderate. LinuxSecurity.com Team
Jul 02, 2026
•moderate
SuSE
202
security advisorymoderatesecurity issueopenSUSE Tumbleweed python311 Moderate Security Issues Update 2026-11068-1
An update that solves 5 vulnerabilities can now be installed.. # python311-3.11.15-6.1 on GA media Announcement ID: openSUSE-SU-2026:11068-1 Rating: moderate Cross-References: * CVE-2026-1502 * CVE-2026-3446 * CVE-2026-4786 * CVE-2026-6019 * CVE-2026-6100 CVSS scores: * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( SUSE ): 7 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * python311 3.11.15-6.1 * python311-32bit 3.11.15-6.1 * python311-curses 3.11.15-6.1 * python311-dbm 3.11.15-6.1 * python311-idle 3.11.15-6.1 * python311-tk 3.11.15-6.1 * python311-x86-64-v3 3.11.15-6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-3446.html *https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html . An update for openSUSE addresses five vulnerabilities in python311 with a moderate severity rating. Update recommended for security.. openSUSE Tumbleweed, python security issues, python311 vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
Jun 20, 2026
•moderate
OpenSUSE
202
security advisorymoderatevulnerabilityopenSUSE Tumbleweed Python311-Tornado6 Moderate Security Issue 2026-11027-1
An update that solves 3 vulnerabilities can now be installed.. # python311-tornado6-6.5.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11027-1 Rating: moderate Cross-References: * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 Affected Products: * openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the python311-tornado6-6.5.7-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * python311-tornado6 6.5.7-1.1 * python313-tornado6 6.5.7-1.1 * python314-tornado6 6.5.7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html . Three security issues addressed in python311-tornado6 for openSUSE Tumbleweed. Update recommended for enhanced safety.. openSUSE python311 Tornado security moderate update. . Severity: moderate. LinuxSecurity.com Team
Jun 15, 2026
•moderate
OpenSUSE
100
security advisorymoderatebuffer overflowopenSUSE Python311 Moderate Buffer Overflow Fix SUSE-2026-2298-1
An update that solves one vulnerability and has one security fix can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:2298-1 Release Date: 2026-06-08T10:17:21Z Rating: moderate References: * bsc#1258364 * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2298=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2298=1 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-2298=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python311-testsuite-3.11.15-150600.3.56.1 * python311-3.11.15-150600.3.56.1 * python311-tk-3.11.15-150600.3.56.1 * python311-base-3.11.15-150600.3.56.1 * python311-tk-debuginfo-3.11.15-150600.3.56.1 *python311-base-debuginfo-3.11.15-150600.3.56.1 * python311-devel-3.11.15-150600.3.56.1 * python311-debuginfo-3.11.15-150600.3.56.1 * python311-dbm-3.11.15-150600.3.56.1 * python311-idle-3.11.15-150600.3.56.1 * python311-testsuite-debuginfo-3.11.15-150600.3.56.1 * python311-core-debugsource-3.11.15-150600.3.56.1 * python311-doc-devhelp-3.11.15-150600.3.56.1 * libpython3_11-1_0-debuginfo-3.11.15-150600.3.56.1 * python311-curses-debuginfo-3.11.15-150600.3.56.1 * python311-debugsource-3.11.15-150600.3.56.1 * python311-dbm-debuginfo-3.11.15-150600.3.56.1 * python311-curses-3.11.15-150600.3.56.1 * python311-doc-3.11.15-150600.3.56.1 * python311-tools-3.11.15-150600.3.56.1 * libpython3_11-1_0-3.11.15-150600.3.56.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.15-150600.3.56.1 * python311-64bit-debuginfo-3.11.15-150600.3.56.1 * libpython3_11-1_0-64bit-debuginfo-3.11.15-150600.3.56.1 * python311-base-64bit-3.11.15-150600.3.56.1 * python311-base-64bit-debuginfo-3.11.15-150600.3.56.1 * python311-64bit-3.11.15-150600.3.56.1 * openSUSE Leap 15.6 (x86_64) * libpython3_11-1_0-32bit-debuginfo-3.11.15-150600.3.56.1 * python311-32bit-debuginfo-3.11.15-150600.3.56.1 * python311-base-32bit-debuginfo-3.11.15-150600.3.56.1 * python311-base-32bit-3.11.15-150600.3.56.1 * python311-32bit-3.11.15-150600.3.56.1 * libpython3_11-1_0-32bit-3.11.15-150600.3.56.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libpython3_11-1_0-debuginfo-3.11.15-150600.3.56.1 * python311-core-debugsource-3.11.15-150600.3.56.1 * python311-base-debuginfo-3.11.15-150600.3.56.1 * python311-base-3.11.15-150600.3.56.1 * libpython3_11-1_0-3.11.15-150600.3.56.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-3.11.15-150600.3.56.1 * python311-dbm-debuginfo-3.11.15-150600.3.56.1 * python311-tk-3.11.15-150600.3.56.1 * python311-curses-3.11.15-150600.3.56.1 *python311-tk-debuginfo-3.11.15-150600.3.56.1 * python311-curses-debuginfo-3.11.15-150600.3.56.1 * python311-dbm-3.11.15-150600.3.56.1 * python311-debugsource-3.11.15-150600.3.56.1 * python311-tools-3.11.15-150600.3.56.1 * python311-core-debugsource-3.11.15-150600.3.56.1 * python311-devel-3.11.15-150600.3.56.1 * python311-debuginfo-3.11.15-150600.3.56.1 * python311-idle-3.11.15-150600.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html * https://bugzilla.suse.com/show_bug.cgi?id=1258364 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . Update for python311 addresses a moderate severity security issue in openSUSE with CVE-2026-3446.. python security patch. . Severity: moderate. LinuxSecurity.com Team
Jun 08, 2026
•moderate
SuSE
100
security advisorymoderateSuSESUSE Minor 6.2 Patch java717 Vulnerability Alert SUSE-SU-2026-31500-6
An update that solves one vulnerability can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:21447-1 Release Date: 2026-04-27T12:30:50Z Rating: moderate References: * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for python311 fixes the following issue: * CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-510=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libpython3_11-1_0-3.11.15-slfo.1.1_4.1 * python311-curses-debuginfo-3.11.15-slfo.1.1_4.1 * python311-base-debuginfo-3.11.15-slfo.1.1_4.1 * python311-debuginfo-3.11.15-slfo.1.1_4.1 * libpython3_11-1_0-debuginfo-3.11.15-slfo.1.1_4.1 * python311-base-3.11.15-slfo.1.1_4.1 * python311-curses-3.11.15-slfo.1.1_4.1 * python311-debugsource-3.11.15-slfo.1.1_4.1 * python311-core-debugsource-3.11.15-slfo.1.1_4.1 * python311-3.11.15-slfo.1.1_4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . SUSE releases security update for python311 addressing base64decoding issue, rated moderate severity.. SUSE Python310 Security Update Base64. . LinuxSecurity.com Team
May 04, 2026
SuSE
100
security advisorymoderatesecurity issueSUSE Linux Micro 6.0 Python311 Moderate Base64 Decode DoS Issue
An update that solves one vulnerability can now be installed.. # Security update for python311 Announcement ID: SUSE-SU-2026:21415-1 Release Date: 2026-04-28T15:08:27Z Rating: moderate References: * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for python311 fixes the following issue: * CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-690=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python311-core-debugsource-3.11.15-4.1 * python311-base-3.11.15-4.1 * python311-debugsource-3.11.15-4.1 * libpython3_11-1_0-3.11.15-4.1 * python311-debuginfo-3.11.15-4.1 * python311-curses-3.11.15-4.1 * python311-base-debuginfo-3.11.15-4.1 * python311-curses-debuginfo-3.11.15-4.1 * python311-3.11.15-4.1 * libpython3_11-1_0-debuginfo-3.11.15-4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . Update for SUSE addresses moderate issue in python311 related to base64 decoding, recommended for installation.. SUSE update, python311 patch, base64 security issue.. LinuxSecurity.com Team
Apr 30, 2026
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!